Conditionalized Access Control Based on Dynamic Content Analysis

Inactive Publication Date: 2005-04-21
IBM CORP
View PDF4 Cites 22 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Benefits of technology

[0011] In general, the method and apparatus allow to dynamically retrieve application-specific access control information from pages, files, or other resource information which can be parsed. In other words, the accessed pages of files can be pre-fetched and parsed at the application layer to obtain access decision information, also abbreviated as ADI. Based on the retrieved

Problems solved by technology

The known proposals present the attribute function as part of the application, which has the disadvantage that it is outside of the scope of the administration of the access control system in the middleware, that means the function is within the application space.
However, a filter based system is rather fixed and therefore a reconfiguration is costly.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Conditionalized Access Control Based on Dynamic Content Analysis
  • Conditionalized Access Control Based on Dynamic Content Analysis
  • Conditionalized Access Control Based on Dynamic Content Analysis

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0022] With reference to FIG. 1, the general layout of a communication environment is described in which the invention can be used. In the figures, same reference signs are used to denote the same or like parts.

[0023]FIG. 1 shows a schematic illustration of an access control system 30 between a user computer 20 and a network computer 60, also referred to as backend server 60, within a network. The user computer 20 executes a client application 22, e.g. a web browser, a web services client, a shopping agent, a financial-services tool, or any other application that may represent a user. The client application 22 is typically executed on the user computer 20, but may also be executed on another computer as long as one can assume that it acts faithfully for its user. In some cases, the client application 22 may even act as an independent entity with an identity of its own and without the user. The user computer's client application is connected to the access control system 30 e.g. a se...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

According to the present invention, there is provided a method and apparatus for controlling an access for a client application residing on a user computer to data stored on a network computer within a network. The method comprises the steps of receiving a request from the user computer for accessing the data; retrieving the data from the network computer and storing it in a memory; deriving from the stored data at least one attribute that relates to the content of the data; and deciding based on the derived at least one attribute whether or not the data stored in the memory is provided to the user computer

Description

FIELD OF THE INVENTION [0001] The present invention is related to a method and apparatus for controlling an access for a client application residing on a user computer to data stored on a network computer within a network. BACKGROUND OF THE INVENTION [0002] Access control usually is part of the middleware and defines whether a user may access a resource by means of an access control policy. This policy is usually defined by an administrator who defines access rights for each pair of user and resource, which are also referred to as access decision information (ADI). This approach can be augmented by allowing boolean conditions that evaluate attributes. [0003] Known proposals present an abstract manner of retrieving resource or object ADI with a so-called attribute function AF that is provided by the application itself, e.g., as proposed by Konstantin Beznosov, “Object Security Attributes: Enabling Application-specific Access Control in Middleware,” presented at the 4th International ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F17/30G06F21/00H04L29/06
CPCG06F21/6209H04L63/10G06F21/6218
InventorGROSS, THOMAS R.KARJOTH, GUENTERSCHUNTER, MATTHIAS
OwnerIBM CORP